Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
File: _byekQMWvi8EM6qVOSzWc53Ca4Y.mft (raw, json)
Hash identifier: FFpu+Md40qEqT2T0OiT29JCNoJqv5UF1SnnLoRn+hX4=
Subject key identifier: B8:AF:32:1F:E2:BA:68:93:EF:94:3C:0C:76:64:00:B3:D7:C2:5D:FB
Authority key identifier: FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86
Certificate issuer: /CN=fdbc9e910316be2f0433aa95392cd6739dc26b86
Certificate serial: 019A5375E7F9A8899B5DE28686117AA6B606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 10:00:27 +0000
Manifest this update: Wed 05 Nov 2025 10:00:27 +0000
Manifest next update: Thu 06 Nov 2025 10:00:27 +0000
Files and hashes: 1: _byekQMWvi8EM6qVOSzWc53Ca4Y.crl (hash: 7GeRH7ZSQAs1HTVkda184m6f3Sqv5aiIC112KLqCmnA=)
2: yxRSGJfki1mfuRlitSEOgfKdMqI.roa (hash: T4WCtISFCRzOuyE0OUo1rNu8VMdZMXWp/avFZYHhGtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:e7:f9:a8:89:9b:5d:e2:86:86:11:7a:a6:b6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdbc9e910316be2f0433aa95392cd6739dc26b86
Validity
Not Before: Nov 5 10:00:27 2025 GMT
Not After : Nov 6 10:00:27 2025 GMT
Subject: CN=b8af321fe2ba6893ef943c0c766400b3d7c25dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f2:f2:c0:17:67:38:58:4c:0e:8a:25:10:a1:
c6:be:12:01:60:8b:96:0a:38:69:44:45:13:9b:20:
14:44:fd:f3:10:f8:a5:08:a0:09:f1:dd:fe:c0:a0:
cf:df:c0:3c:b3:c3:90:20:9c:52:19:86:a5:12:89:
9b:b4:ad:dc:b3:c1:03:a7:d9:a7:5c:bd:7e:4e:19:
c5:bb:49:c0:59:9d:18:84:2f:2e:33:e4:d2:fe:d3:
7e:67:dd:5a:a1:f2:7d:8f:64:6f:8a:c8:18:ee:6c:
4d:73:2f:e6:f6:97:1e:bf:5e:77:02:b8:e3:02:04:
88:77:28:be:b0:ad:71:a2:a9:5c:38:5e:90:05:ff:
83:69:c8:95:5a:00:4f:ad:5f:a4:29:76:9e:9e:2a:
d6:ba:71:4f:75:24:c4:34:8c:a1:c3:af:8b:b1:7f:
fa:81:45:ad:ec:aa:6d:d8:4b:53:18:5b:5c:58:64:
fd:c5:61:c4:9a:62:6b:30:82:b3:8c:2f:fb:83:58:
7c:e5:c1:df:a8:96:32:e4:92:5d:3a:af:89:37:aa:
63:94:0b:fc:d8:11:d9:b9:67:41:0d:4f:48:35:8c:
cb:16:c9:5e:2b:d7:ff:e7:4d:a4:9f:58:2a:da:95:
3c:9f:85:98:09:07:05:65:f5:ae:21:28:a6:62:87:
41:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AF:32:1F:E2:BA:68:93:EF:94:3C:0C:76:64:00:B3:D7:C2:5D:FB
X509v3 Authority Key Identifier:
keyid:FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:88:49:26:87:76:d9:cf:45:89:bc:13:52:0c:e4:9d:fd:e1:
e7:e8:c5:66:48:2e:70:9a:65:be:b2:bf:00:1f:77:b7:d0:d7:
96:77:a3:d9:17:3b:35:08:73:2c:af:1f:9a:40:33:54:76:f9:
fe:36:96:e0:16:e7:f7:31:a9:c8:83:71:ba:ca:9e:a3:d6:35:
8d:3a:60:4a:f2:b8:31:12:2e:ed:7c:3a:09:95:1c:b8:c8:9a:
3f:35:ab:67:99:40:93:6d:63:0b:f5:03:a5:3d:aa:14:56:6c:
b4:8e:b8:a3:95:d1:24:fd:b3:98:b8:77:78:4b:08:e1:28:3d:
50:7d:d7:e1:36:04:f3:a9:df:ee:29:3e:89:cf:a8:84:e8:42:
9b:7e:95:f4:6b:df:d7:14:8e:d1:02:86:d9:6c:21:58:c6:f5:
80:e4:43:e7:18:41:5b:9b:64:a7:a0:21:d3:6c:03:49:fb:d1:
2a:05:52:24:d3:76:af:27:9d:e4:0b:1f:36:b8:36:c1:f3:ff:
53:b7:33:45:20:5b:09:f6:2d:ac:a6:9a:04:c6:87:09:c4:7f:
7d:23:23:ae:3a:7b:34:29:26:bc:e3:45:f0:08:a9:de:ed:ed:
4f:82:94:67:68:2a:fb:e7:69:e4:4c:b3:07:0e:b0:85:83:ca:
07:33:39:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:04:52 2025 by rpki-client